基于口令因子的web口令安全性评估方法研究  

Password Security Evaluation Method Based on Password Factor for Web

作　　者：李蓓蕾 唐祖锴[1] 陈燕 LI Bei-lei;TANG Zu-kai;CHEN Yan(School of Computer Science and Technology,Wuhan University of Technology,Wuhan 430070,China)

机构地区：[1]武汉理工大学计算机科学与技术学院,武汉430070

出　　处：《湖北第二师范学院学报》2018年第8期35-39,共5页Journal of Hubei University of Education

摘　　要：口令是应用最为广泛的身份认证方法,web口令的安全性是影响网络环境安全的一个重要因素。本文通过对大规模的真实Web明文口令进行分析和挖掘,将口令拆分成口令因子的方式,总结出用户设置Web口令的特征和真实性规则。并将这些特征和设置规则作为评估参数,运用模糊综合评价法和层次分析法对web口令安全性进行评估。Password is the most widely used authentication method, and the security of Web password is an important factor affecting the security of network environment. Through analyzing and mining large-scale real Web plaintext passwords, this paper summarizes the characteristics and authenticity rules of setting Web passwords by splitting passwords into password factors. Taking these features and setting rules as evaluation parameters, the security of Web password is evaluated by fuzzy comprehensive evaluation method and analytic hierarchy process.

关 键 词：口令因子 明文口令 口令安全性 口令组成规则 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]